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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1. (Currently Amended) An information processing apparatus supporting 
secret information management, comprising: 

a management master extraction module which receives a management 
target file containing secret information via an input interface and extracts 
management master information, including a file ID and information on validity of the 
management target file, from the management target file; 

a storage device which stores a file management database with which the 
management master information on each management target file is registered; 

a storage event output module which outputs a signal indicating a storage 
event of the management target file in the storage device to an output interface; 

a deletion target extraction module which receives a deletion request 
regarding the management target file via the input interface and extracts information 
on the management target file corresponding to the deletion request from the file 
management database; 

a mode determination module responsive to the deletion target extraction 
module, which determines whether deletion mode information included in the 
deletion request indicates a self-destructive mode requesting deletion of the 



management master information as well as deletion of the management target file: 
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a file deletion module which executes the deletion of the management target 
file from the storage device in response to a first determination result by the mode 
determination module indicating that the deletion mode information does not indicate 
the self-destructiv e mode: bas e d on the i nformation on thp m a ngg p rn g nt targ p t fi l* 
e xtracted by the deletion targot e xtraction modu l o - 

a management master information update module which updates the validity 
information on the management target file deleted by the file deletion module, 
included in the management'master information registered with the file management 
database, into invalid; and 

a deletion information output module which outputs a signal indicating that the 
management target file has been deleted by the file deletion module to the output 
interface ; and, 

a management master information deletion module which locates the 
management ma^r Information of the management target file which has been 
registered with the file management database, and deletes the management master 
information and the management target file in response to a second determination 
result by the mode determination module indicating that the deletion mode 
information indicates the self-destructive mode . 

2. (Canceled) 
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3. (Currently Amended) The information processing apparatus according to 
claim 1 , furth e r comprising: 

an access authority extraction module which receives a backup request 
regarding a management target file via the input interface and extracts access 
authority information on the management target file corresponding to the backup 
request from the file management database; 

an access authority judgment module which receives user authority 
information on a user corresponding to the backup request via the Input interface^ 
and judges whether the management target file corresponding to the backup request 
may be accessed or not by checking the user authority information with the access 
authority information; 

a copy generation module which extracts the management target file 
corresponding to the backup request from the storage device and generates a copy 
file of the management target file if the access authority Judgment module judged 
that the management target file may be accessed; 

a copy output module which outputs the copy file of the management target 
file to a backup medium; and 

a copy file registration module which extracts management master 
information on the copy file and stores the extracted management master 
information in the file management database. 
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4. (Currently Amended) The information processing apparatus according to 
claim 1, *u4beM:omprising: 

an access authority extraction module which receives a usage request 
regarding a management target file via the input interface and extracts access 
authority information on the management target file corresponding to the usage 
request from the file management database; 

an access authority judgment module which receives user authority 
information on a user corresponding to the usage request via the input interface x and 
judges whether the management target file corresponding to the usage request may 
be accessed or not by checking the user authority information with the access 
authority information; 

an available file output module which extracts the management target file 
corresponding to the usage request from the storage device^ and outputs the 
extracted management target file to the output interface if the access authority 
judgment module judged that the management target file may be accessed; 

an updated file generation module which receives an update process for 
updating the management target file outputted by the available file output module via 
the input interface and thereby generates an updated file; 

an updated file storage module which stores the updated file in the storage 
device; and 

an updated file registration module which extracts management master 
information on the updated file and stores the extracted management master 
information In the file management database. 
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5. (Currently Amended) The information processing apparatus according to 
claim 3. ftrfmef^omprising: 

a relevant deletion target extraction module which extracts information on the 
copy file derived from the management target file corresponding to the deletion 
request in addition to the Information on the management target file from the file 
management database; 

a relevant file deletion module which executes the deletion of the copy file 
from the backup medium based on the information on the copy file extracted by the 
relevant deletion target extraction module; 

a relevant management master information update module which updates the 
validity information on the copy file deleted by the relevant file deletion module, 
included In the management master information registered with the file management 
database, into invalid; and 

an informing module which informs a second information processing 
apparatus connected with the information processing apparatus via a network that 
the copy file has been deleted by the relevant file deletion module, via the output 
interface. 

6. (Currently Amended) The information processing apparatus according to 
claim 4. further c omprising: 

a relevant deletion target extraction module which extracts information on the 
updated file derived from the management target file corresponding to the deletion * 
request in addition to the information on the management target file from the file 
management database; 
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a relevant file deletion module which executes the deletion of the updated file 
from the storage device based on the information on the updated file extracted by 
the relevant deletion target extraction module; 

a relevant management master information update module which updates the 
validity information on the updated file deleted by the relevant file deletion module, 
included in the management master information registered with the file management 
database, into invalid; and 

an informing module which informs a second information processing 
apparatus connected with the information processing apparatus via a network that 
the updated file has been deleted by the relevant file deletion module, via the output 
interface. 

7. (Currently Amended) The information processing apparatus according to 
Claim 1 , fufthor comprising: 

a business application process judgment module which judges whether a 
user has authority or not in a business process authority database, in which the 
presence/absence of deletion authority, backup authority or usage authority of each 
user regarding each management target file is stipulated, when a business 
application using a management target file is executed; and 

a business application process execution module which extracts the 
management target file to be processed by the business application from the 
storage device^ and provides the management target file to the business application 
if the business application process judgment module judged that the user has the 
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deletion authority, the backup authority or the usage authority regarding the 
management target file. 

8. (Currently Amended) The information processing apparatus according to 
claim 1 , furth e r comprising: 

a first copy execution module which copies information stored in the storage 
device into a second storage device after the deletion of the management target file 
from the storage device is executed by the file deletion module; 

a first demagnetization execution module which writes a prescribed data 
pattern to each memory unit such as each GQGtor of the storage device for a preset 
number of times; 

a second copy execution module which copies the information stored in the 
second storage device back into the storage device; and 

a second demagnetization execution module which writes a prescribed data 
pattern to each memory unit suoh ao oach soctor of the second storage device for a 
preset number of times. 

9. (Currently Amended) The information processing apparatus according to 
claim 5, fefthe^comprising: 

a first copy execution module which copies Information stored in the storage 
device and the backup medium to a second storage device after the deletion of the 
management target file and the copy file from the storage device and the backup 
medium is executed by the file deletion module and the relevant file deletion module; 
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a first demagnetization execution module which writes a prescribed data 
pattern to each memory unit suc h as e a ch se ctor o f the storage device and the 
backup medium for a preset number of times; 

a second copy execution module which copies the information stored in the 
second storage device back into the storage device and the backup medium; and 

a second demagnetization execution module which writes a prescribed data 
pattern to each memory unit such - as oach sector of the second storage device for a 
preset number of times, 

10. (Currently Amended) The information processing apparatus according to 
claim 6, furthef-comprislng: 

a first copy execution module which copies information stored in the storage 
device to a second storage device after the deletion of the management target file 
and the updated file from the storage device is executed by the file deletion module 
and the relevant file deletion module; 

a first demagnetization execution module which writes a prescribed data 
pattern to each memory unit such as e ach s e ctor of the storage device for a preset 
number of times; 

a second copy execution module which copies the information stored in the 
second storage device back into the storage device; and 

a second demagnetization execution module which writes a prescribed data 
pattern to each memory unit cuch as e ach s e ctor of the second storage device for a 
preset number of times. 
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1 1 . (Currently Amended) An information management method for managing 
secret information by use of an information processing apparatus, comprising: me 
st e p s of: 

receiving a management target file containing secret information through an 
input interface and extracting management master information, including a file ID, 
information on access authority to the management target file, and information on 
validity of the management target file, from the management target file; 

registering the management master information on each management target 
file with a file management database; 

storing the management target file in a storage device associating the same 
with the management master information; 

outputting a signal indicating the storage event of the management target file 
in the storage device to an output interface; 

receiving a deletion request regarding the management target file via the 
input interface, and extracting Information on the management target file 
corresponding to the deletion request from the file management database; 

determining whether deletion mode information included in the deletion 
request indicates a self-destructive mode requesting deletion of the management 
master information as well as deletion of the management target file; 

executing the deletion of the management target file from the storage device 
in response to a first determination result by the determining operation indicating 
that the deletion mode information does not indicate the self-destructive 
mode ftacod on tho i nformat i on on th e manogomont target fil e extroot e d from th e fil e 
managom o nt databas e ; 
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updating the validity information on the management target file deleted from 
the storage device, included In the management master information registered in the 
tile management database, into invalid; and 

outputting a signal indicating that the management target file has been 
deleted to the output interface : and. 

locating the management master information of the management target file 
which has been registered with the file management database and deleting the 
management master Information and the management target file, in response to a 
second determination result bv the determining operation indicating that the deletion 
mode information indicates the self-destructive mode . 

12. (New) The information management method according to claim 11, 
comprising: 

receiving a backup request regarding a management target file via the input 
interface and extracting access authority information on the management target file 
corresponding to the backup request from the file management database; 

receiving user authority information on a user corresponding to the backup 
request via the input interface, and judging whether the management target file 
corresponding to the backup request may be accessed or not by checking the user 
authority information with the access authority information; 

extracting the management target file corresponding to the backup request 
from the storage device and generating a copy file of the management target file if 
the judging judged that the management target file may be accessed; 
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outputting the copy file of the management target file to a backup medium; 

and 

extracting management master Information on the copy file and storing the 
extracted management master information in the file management database. 



13. (New) The information management method according to claim 1 1 , 
comprising: 

receiving a usage request regarding a management target file via the input 
interface and extracting access authority information on the management target file 
corresponding to the usage request from the file management database; 

receiving user authority information on a user corresponding to the usage 
request via the input interface, and judging whether the management target file 
corresponding to the usage request may be accessed or not by checking the user 
authority information with the access authority information; 

extracting the management target file corresponding to the usage request 
from the storage device, and outputting the extracted management target file to the 
output interface if the judging judged that the management target file may be 
accessed; 

receiving an update process for updating the management target file 
outputted by the available file output module via the input interface and thereby 
generating an updated file; 

storing the updated file in the storage device; and 

extracting management master information on the updated file and storing the 
extracted management master information in the file management database. 
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14. (New) The information management method according to claim 12, 
comprising: 

extracting information on the copy file derived from the management target 
file corresponding to the deletion request in addition to the information on the 
management target file from the file management database; 

executing the deletion of the copy file from the backup medium based on the 
information on the copy file extracted by the extracting operation; 

updating the validity information on the copy file deleted by the executing, 
included in the management master information registered with the file management 
database, into invalid; and 

informing a second information processing apparatus connected with a first 
information processing apparatus via a network that the copy file has been deleted, 
via the output interface. 

15. (New) The information management method according to claim 13, 
comprising: 

extracting information on the updated file derived from the management 
target file corresponding to the deletion request in addition to the Information on the 
management target file from the file management database; 

executing the deletion of the updated file from the storage device based on 
the information on the updated file extracted by the extracting operation; 
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updating the validity information on the updated file deleted by the executing, 
included in the management master information registered with the file management 
database, into invalid; and 

informing a second information processing apparatus connected with a first 
information processing apparatus via a network that the updated file has been 
deleted, via the output interface. 



1 6. (New) The information management method according to claim 1 1 . 
comprising: 

judging whether a user has authority or not in a business process authority 
database, in which the presence/absence of deletion authority, backup authority or 
usage authority of each user regarding each management target file is stipulated, 
when a business application using a management target file is executed; and 

extracting the management target file to be processed by the business 
application from the storage device, and providing the management target file to the 
business application if the judging judged that the user has the deletion authority, 
the backup authority or the usage authority regarding the management target file. 

1 7. (New) The information management method according to claim 1 1 . 
comprising: 

copying information stored in the storage device into a second storage device 
after the deletion of the management target file from the storage device is executed; 

writing a prescribed data pattern to each memory unit of the storage device 
for a preset number of times; 
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copying the information stored in the second storage device back into the 
storage device; and 

writing a prescribed data pattern to each memory unit of the second storage 
device for a preset number of times. 



18. (New) The information management method according to claim 14, 
comprising: 

copying information stored in the storage device and the backup medium to a 
second storage device after the deletion of the management target file and the copy 
file from the storage device and the backup medium is executed; 

writing a prescribed data pattern to each memory unit of the storage device 
and the backup medium for a preset number of times; 

copying the information stored in the second storage device back into the 
storage device and the backup medium; and 

writing a prescribed data pattern to each memory unit of the second storage 
device for a preset number of times. 

19. (New) The information management method according to claim 15, 
comprising: 

copying information stored in the storage device to a second storage device 
after the deletion of the management target file and the updated file from the storage 
device Is executed; 

writing a prescribed data pattern to each memory unit of the storage device 
for a preset number of times; 
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copying the information stored in the second storage device back into the 
storage device; and 

writing a prescribed data pattern to each memory unit of the second storage 
device for a preset number of times. 
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